Repository navigation
Keep session feedback responsive and enforce scoped tool approvals - #654
Merged
Merged
Conversation
Render the five-point voting choices directly below the survey question, preserve drafts, and send feedback and redacted bug reports in the background. Evaluate command and path scopes with concrete arguments, restore permissions after timed auto-approval, and include the reviewed dependency refresh. Co-authored-by: Autohand Evolve <code-noreply@autohand.ai>
igorcosta
added
the
full-proof
Persist hook toggles in order before returning from the command or reporting success. Recheck settled Tuistory frames, close failed startup sessions, and wait for child exit before removing terminal fixtures. Keep mobile pairing tests independent of external relay and startup APIs. Integrate upstream peer selection synchronization and release validation. Add an opt-in GitHub job for full proof on an uninterrupted runner. Co-authored-by: Autohand Evolve <code-noreply@autohand.ai>
igorcosta
marked this pull request as ready for review
October 9, 2026 00:53
igorcosta
added a commit
that referenced
this pull request
Oct 9, 2026
) Render feedback voting directly below its question and preserve composer drafts. Enforce concrete tool scopes and restore prior permissions when timed auto-approval expires. Persist hook toggles before reporting completion, repair terminal-session startup and cleanup races, and isolate mobile pairing fixtures from external requests. Include the reviewed dependency refresh and optional full-proof workflow. Validation: all 23 checks passed, including complete bun run proof in GitHub CI. Co-authored-by: Autohand Evolve <code-noreply@autohand.ai>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Session feedback should leave the composer usable, and argument-scoped tool approvals must be checked against the command or path that will actually run. This change adds an optional five-point survey above the composer, renders voting choices directly below its question, preserves drafts, and enforces concrete tool scopes. Timed auto-approval restores the prior permission settings when it expires.
/feedback <message>and/bug//bug-reportsubmissions in the background with redacted session diagnostics, optional GitHub identity, and anonymous reporting support.full-prooflabel workflow that runs the complete proof on a GitHub runner.Validation:
bun run proofpassed in GitHub CI for commit33192ed800b9a27ff658de51f68204f0d3687430: 11,352 unit tests passed (38 skipped), followed by all 57 terminal test files passing with 253 tests passed (3 skipped). No failures. This includes lint, typechecking, and the production build.The provider incidents reviewed alongside this work remain separate: findings were posted on all 26 open reports, and only identical duplicates #627 and #629 were closed in favor of #628 and #630. This PR does not resolve the remaining OpenAI compatibility, missing-tool-result, Autohand safety-check, or Azure authentication reports.